d90710efc4b1757cfd3088faf33b4dfb8a259a6d95c9b4874bcc550cdbc6d100 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d90710efc4b1757cfd3088faf33b4dfb8a259a6d95c9b4874bcc550cdbc6d100
Size

664KB
MD5

66427bcbbf3545f26d80165a673e5740
SHA1

95699a9e97e7b10f59fdf937450e4fa9c05a7686
SHA256

d90710efc4b1757cfd3088faf33b4dfb8a259a6d95c9b4874bcc550cdbc6d100
SHA512

5ef7554544eec5b93a210309795577d83405aa2f0e6911c3cf259ccb329079ff66dc18aa1d5db105bdae91304b118c8a4c0a30d6737a45e41641e86aa1023807
SSDEEP

12288:SmvwxDtFI16O9UhlL9RwUT4btu+LUaVtu0Aw1Ijo:pADzIMJL9RwUkbPD1io

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d90710efc4b1757cfd3088faf33b4dfb8a259a6d95c9b4874bcc550cdbc6d100
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 876KB - Virtual size: 875KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ